don't let non-managers view list of users for now